Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/3889262E850711EDB1865628C4F9AE02.roa
File: 3889262E850711EDB1865628C4F9AE02.roa (raw, json)
Hash identifier: 5qVLzGoSoqOZbQCI4ETmz7p6QgqOT0TkS85yg64dyEE=
Subject key identifier: D6:CF:12:60:BA:27:71:FF:25:86:67:B4:53:4C:B7:E3:2C:8F:75:41
Certificate issuer: /CN=A91C83F1/serialNumber=5A5A330994A66CFA1284F32606E39E195C7CA967
Certificate serial: 0504
Authority key identifier: 5A:5A:33:09:94:A6:6C:FA:12:84:F3:26:06:E3:9E:19:5C:7C:A9:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WlozCZSmbPoShPMmBuOeGVx8qWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/3889262E850711EDB1865628C4F9AE02.roa
Signing time: Fri 03 Nov 2023 00:53:00 +0000
ROA not before: Fri 03 Nov 2023 00:53:00 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 201815
IP address blocks: 103.166.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1284 (0x504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C83F1/serialNumber=5A5A330994A66CFA1284F32606E39E195C7CA967
Validity
Not Before: Nov 3 00:53:00 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=6544446c-4dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:c0:c8:92:95:49:a1:2b:fb:66:c1:ce:e8:
ee:cd:af:86:1b:da:0c:72:2d:61:d0:64:b9:00:79:
db:d2:a6:16:8b:3f:0f:16:94:3f:52:13:c2:25:ce:
77:a6:dd:37:cf:a9:fb:f3:07:1d:b5:52:23:db:e1:
ad:67:4e:d6:b9:d3:13:9b:be:0c:0b:6a:b3:11:52:
db:58:d2:ac:32:12:95:d9:dc:2a:48:f0:f6:14:eb:
ed:b6:e0:bd:c8:08:1e:de:94:16:d3:4f:83:86:0f:
c9:b1:2f:57:1e:1f:5d:06:f2:98:ac:03:05:9b:21:
33:c2:8a:c0:b5:64:bd:b5:1c:c1:b7:51:95:bb:2e:
11:87:7a:16:a3:bb:fd:45:24:de:de:f0:28:cc:e2:
de:86:7b:4c:45:b7:e3:a1:f3:ab:3d:36:91:d8:50:
ec:d8:8a:0d:79:71:55:a6:0b:e6:ea:21:15:95:2d:
41:de:1a:8c:46:71:dc:47:8c:8d:3c:db:9a:37:7a:
3f:76:ec:e7:c6:c5:f0:ac:f6:96:51:4d:1b:5a:84:
64:7a:b2:ce:c3:15:eb:8a:ca:91:9f:da:c3:1a:91:
df:8a:73:a7:1d:09:0f:ec:29:47:87:7c:67:38:61:
43:e0:7c:d1:6c:bc:79:ed:72:6d:3a:51:e6:ed:c3:
c8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CF:12:60:BA:27:71:FF:25:86:67:B4:53:4C:B7:E3:2C:8F:75:41
X509v3 Authority Key Identifier:
keyid:5A:5A:33:09:94:A6:6C:FA:12:84:F3:26:06:E3:9E:19:5C:7C:A9:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/WlozCZSmbPoShPMmBuOeGVx8qWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WlozCZSmbPoShPMmBuOeGVx8qWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/3889262E850711EDB1865628C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.166.246.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ff:24:dc:ba:a2:80:54:83:8e:05:24:4a:c3:3c:9e:be:db:
15:c2:a8:5f:9f:75:e8:48:eb:e1:80:e5:56:27:ca:fd:1b:b6:
97:d1:fe:dc:1b:7d:9f:95:ac:0e:84:21:bd:f3:7b:d8:87:42:
db:d7:1f:a7:78:b4:a7:e4:ce:3f:90:b7:3b:5d:a6:d8:07:b2:
a3:94:29:9b:b4:38:03:38:78:94:50:02:6f:43:aa:89:c9:34:
6c:7c:7a:f0:0c:b1:3a:67:ea:2f:d8:7d:87:1e:7e:6a:68:ad:
de:e4:f0:d3:e7:17:16:5a:bc:29:c7:aa:7d:06:42:9c:2c:d0:
b4:fc:5d:60:da:70:06:2b:f5:06:69:94:90:01:db:c8:4b:07:
7a:53:85:fa:b8:db:e9:81:59:3e:8c:c3:f2:b5:63:8c:5e:10:
30:f4:c5:66:c6:13:d8:64:3c:68:37:e0:a6:81:31:62:f6:7a:
a7:3b:b5:3f:a4:c4:3e:d8:96:b4:49:52:5d:7d:c1:32:c9:37:
02:c7:d4:0e:ff:88:45:21:17:ed:5a:66:95:a2:1a:b8:f0:85:
5f:2e:06:54:e3:c6:ee:6e:78:29:5e:9c:1e:90:f3:69:66:83:
c4:18:a3:4e:15:e2:20:8e:8b:a3:99:51:6a:5b:93:8f:db:39:
41:ba:f0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:25 2023 by rpki-client on console.sobornost.net